# Breaking change: Update clients to always include JWT

> JWTMiddleware now enforces token presence on every request. validate=False no longer permits requests without a token.

- Published: 2025-12-18
- Author: Agno Team
- Category: Changelog
- Canonical: https://agno-com-nine.vercel.app/articles/breaking-change-update-clients-to-always-include-jwt
- Markdown: https://agno-com-nine.vercel.app/articles/breaking-change-update-clients-to-always-include-jwt.md

JWTMiddleware now enforces token presence on every request. validate=False no longer permits requests without a token. This improves baseline security and reduces the risk of accidental unauthenticated access.

Details:

- Action: propagate JWTs across all clients and internal services
- Validate non-verified paths still include tokens and pass as expected
- Monitor auth metrics to verify parity post‑migration

Who this is for: Operators and integration teams managing authentication across services and environments.